%% You should probably cite rfc9416 instead of this I-D.
@techreport{gont-numeric-ids-sec-considerations-06,
    number =    {draft-gont-numeric-ids-sec-considerations-06},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-gont-numeric-ids-sec-considerations/06/},
    author =    {Fernando Gont and Ivan Arce},
    title =     {{Security Considerations for Transient Numeric Identifiers Employed in Network Protocols}},
    pagetotal = 9,
    year =      2020,
    month =     dec,
    day =       5,
    abstract =  {Poor selection of transient numerical identifiers in protocols such as the TCP/IP suite has historically led to a number of attacks on implementations, ranging from Denial of Service (DoS) to data injection and information leakage that can be exploited by pervasive monitoring. To prevent such flaws in future protocols and implementations, this document updates RFC 3552, requiring future RFCs to contain analysis of the security and privacy properties of any transient numeric identifiers specified by the protocol.},
}